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Lattices and codes with long shadows 

Noam D. Elkies 



Introduction. 



C , By a characteristic vector of an integral unimodular lattice L C R" we mean 

^ ' a vector w € L such that {v, w) = (w, v) mod 2 for all v € L. Such vectors are 



known to constitute a coset of 2L in L whose norms are congruent to n mod 8 
(see e.g. [Sg, Ch. V]); dividing this coset by 2 yields a translate of L called the 



shadow of L in | CS2 |. If L = Z" then w € L is characteristic if and only if 
all its coordinates are odd, so every characteristic vector of Z" has norm at 
^_^ . least n. In |Q we proved that if L ^ Z" then L has characteristic vectors of 

^ ' norm ^ n — 8, and described without proof all lattices for which n — 8 is the 

(— I , minimum. Here we prove this result, and along the way also obtain congruences 

and a lower bound on the kissing number of unimodular lattices with minimal 
norm 2. We then state and prove analogues of these results for self-dual codes, 
and relate them directly to the lattice problems via Construction A. 



Estimates for unimodular lattices 
> 

\^ I Any integral lattice L decomposes as the direct sum Z^ © Lq where the Z^ 

00 ■ is generated by the vectors of norm 1 and Lq is a lattice of minimal norm ^ 2. 

^D ' [This Lo is called the "reduced form" or "initial lattice" of L in |CS1, p. 414], the 

O 



latter terminology suggesting the infinite family of lattices Lq, io ® Z, Lq © Z'^, 

etc., of which Lq is the initial member.] If L (and thus also Lq) is unimodular 

Qv^ i then the shadow of L is the orthogonal sum of the shadows of Z^ and Lq. 

Replacing L by Lq thus reduces both the rank of the lattice and the norm of its 
shortest characteristic vector by r, and does not change the difference between 
^ these two integers. We may thus restrict attention to lattices with no vectors 

f^ . of norm 1 for which that difference is 8, and at the end recover all such lattices 

^ ' by adding arbitrarily many Z's. 

'k^ I Theorem 1. Let L be an integral unimodular lattice in R" with no vectors 

'V^ ■ of norm 1. Then: 

d ' i) L has at least 2n(23 — n) vectors of norm 2. 

a) Equality holds if and only if L has no characteristic vectors of norm 
<n-8. 

Hi) In that case the number of characteristic vectors of norm exactly n — 8 
is 2"-"n. 

Proof: We use theta series as in plf, though here we freely invoke modular 



forms. For t in the upper half-plane H define 

CXD 

0L(i):=^e"l'^l'*-^7Vfce"'=*, (1) 

veL fe=o 

where Nk is the number of lattice vectors of norm fc, and 

oo 
veL+f k=0 

where w € L is any characteristic vector and N^ is the number of characteristic 
vectors of norm fc, or equivalently the number of shadow vectors of norm fc/4. 
In 1^ we noted the identity 

e^i^ + i) = it/zr/'e'^it). (3) 



By a theorem of Hecke (see e.g. [ CSl , Ch.7, Thm.7]), 9l is a modular form of 
weight n/2 and can be written as a weighted-homogeneous polynomial Pl{Oz, 9 Eg, 
in the modular forms 

Ozit) := 1 + 2 (e'^** + e^'^" + e^^^** + ■ • •) (4) 

of weight 1/2 and 

0s, (i) = 1 + 240 E Y3^2^»^ = 1 + 240e'"** + 21606^"* + • • • (5) 
of weight 4. From (0) it follows that ^^ is given by 

9'L=PLiO'z,dEs), (6) 

where 

oo 

^z(0 = 2 E 6'^*^™+^''* = 26"*/-* (1 + e^"' + e^"* + e^^^^** + •■•), (7) 

and we used the fact that 9'^ = 9e8 because Eg is an even lattice. Since 
^z(^) '^ 2e^**/^ as i — > zoo, while £'4(100) = 1 is nonzero, we see from (m that 
the norm of the shortest characteristic vectors is simply the exponent of X in 
the factorization of Pl {X, Y) .R 

^We could now recover our theorem from ||E1 by observing that this exponent is at most n, 
with equality if and only if dj^ is proportional to d^, etc.; but this is really the same proof 
because the crucial fact that 9z vanishes at one cusp and nowhere else is also an essential 
ingredient of Hecke's theorem. 



In our setting iVo = 1 and A^i — 0. We first prove part (ii) of our tlieorem. 
If L has no characteristic vectors of norm < n — 8 then Pl {X, Y) is a linear 
combination of X" and X"'~^Y. The known values of No,Ni determine this 
combination uniquely: we find that 

OL=0'i- '-^ei-^ (0| - e^J = 1 + e"* + 2n(23 - n)e'^'' + ■■■ . (8) 
8 

Thus L indeed has 2n(23 — n) vectors of norm 2. Conversely if L is an integral 
unimodular lattice with A^i = and N2 ^ 2n(23 — n) then n <2A and Pl has 
at most 3 terms, whose coefficients are determined uniquely by A'o, A'^i, 7V2: 



nn-8 ^^8 /) ^ , ^2 " (2^(23 - n)) ^g .8 

^z rz - ^Es) H Y^ Vj. rz 



(9) 



But then by (^) we have 

iV;_ie = 2"-24[7V2-(2„(23 -«))]. (10) 

Since N^_iq 5^ we conclude that N2 > 2n(23 — n) even for n < 24, as claimed 
in part (i) of the theorem; and equality occurs if and only if -/V^_ie vanishes, 
whence the reverse implication in part (ii) follows. Finally to prove part (iii) we 
use (|[||) to compute 



9'" — — fl'"" 

Z o Z 



(^z - ^Es) = 2"-"n e("-«)"* + ■ • ■ , (11) 



so -/V4_g = 2"~^-^n as claimed. □ 

Fortunately the integral unimodular lattices of rank n < 24 are completely 
known, and those with A^i = are conveniently listed with their N2 values 



in the table of |CS1, pp. 416-7]. For n < 16 the shortest characteristic vector 
must have norm at least n — 8, so any unimodular lattice of minimal norm > 1 
must have 2n(23 — n) vectors of norm 2; this is confirmed by the table. When 
16 < n ^ 23 some lattices can have more than 2n(23 — n) such vectors, but it 
turns out there is always at least one lattice with N2 = 2n(23 — n). (Can this 
be proved a priori?) Thus, as observed by J.H. Conway, the lattices of parts 
(ii), (iii) of our theorem are precisely the integral unimodular lattices of rank 
n < 24 with A^i = that minimize N2 given n. As noted in pU, there are 
fourteen such lattices; in the following list, adapted from pl, we label them as 



in the table of [CSl] by the root system of norm-2 vectors: 



n 


8 


12 


14 


15 


16 


17 


18 


19 


20 


21 


22 


23 


N2 


240 


264 


252 


240 


224 


204 


180 


152 


120 


84 


44 







E» 


£'12 


i^l 


^15 


Dl 


AhEq 


Dl Al 


A?i?5 


Dl Ai 


Al 


Af 


O23 



We noted in pl that from our characterization of Z" we could also recover 
the fact that Z" is the only integral unimodular lattice of rank n for n < 8. 
Likewise from part (iii) of Theorem 1 we can recover the fact that every integral 



unimodular lattice of rank n < 12 is cither Z" or Z"^* Es- Indeed there 
would otherwise be such a lattice of rank 9, 10, or 11 with no vector of norm 1, 
but then by (iii) the lattice would have iV^.g = 2"~^^n, which is impossible 
because N^_g, is an even integer for any lattice of rank n ^ 8. 

Having obtained (|lO|), we used A^4-i6 > to prove N2 ^ 2n(23 — n). Since 
Nn-16 is always an even integer unless n = 16 and is a characteristic vector 
(<;=> L is its own shadow <;=> L is an even lattice), it follows that in fact 

N2 = 2n(23 - n) mod 2^^"" (12) 

for any even unimodular lattice with no vectors of norm 1, with the exception 
of the two even lattices E^, U ^ of r ank 16, which have N2 — 480. (This is 



similar to the argument used in |CSl| , Ch.l9, p. 440] to prove that there are no 
"extremal Type I lattices" with 16 ^ n ^ 22, a fact which now also follows 
fro m pa rt (i) of our Theorem.) The congruence (|l^) is confirmed by the table 



of [CS1|, which also reveals that N2 — 2n(23 — n) is always a multiple of 2 even 



for n = 22 and n = 23; a "conceptual" (but far from easy) proof of this is found 



in I Bo, Thm. 4.4.2(3)]. Note that even though we have only proved (12) for 



n < 24, it in fact holds for all n, since N2 is always an even integer. 
Estimates for self-dual binary codes 



We recall some basic facts about binary linear codes; see for instance [CSl 
Ch.3, §2.2]. Let F = Z/2Z be the two-element field. We work in the vector 
space F", whose elements we regard as "words" of length n whose "letters" 
are taken from the "alphabet" F. The (Hamming) "weight" wt{w) of a word 
w = {wi,W2, ■ ■ ■ ,Wn) & F'^ is #{j : Wj = 1} of nonzero coordinates of w. A 
"binary linear code" of length n is a subspace C C F". A binary self-dual code 
is a linear code which is its own annihilator under the nondegenerate pairing 
(•,•): C X C ^ F, defined by {v^w) = Yll=i'^3'^3- Such a code must have 
dimension n/2, and thus can only exist if n is even, which we henceforth assume. 
Note that under our pairing we have 

[w, w) = (w, 1") = wt(u;) mod 2 (13) 

for all w £ F", where 1" is the all-ones vector in F". Thus if C is a self-dual 
code then C 9 1" and all the words in C have even weight. 

The "weight enumerator" Wc of C is a generating function for the weight 
distribution of C: 

M/c(a;,y):=^x"-**(^)y"*(^). (14) 

cGC 



For a binary self-dual code a theorem of Gleason (Thm. 6 of [ CSl , Ch.7]), analo- 
gous to Hecke's theorem for theta series of lattices, states that Wc is a weighted- 
homogeneous polynomial Pw{x^ + y^ , x^ + 14a;^j/'* -I- y^) in the weight enumer- 
ators of the double repetition code z := {(0, 0), (1, 1)} C F^ and the extended 
Hamming code in F* respectively. 



Analogous to the homomorphisni v i-^ |wp mod 2 from an integral lattice 
to Z/2 we have for any self-dual code C C F" a linear map from C to F taking 
any c S C to ^wt(c) mod 2. We can use the pairing on F" to represent any 
linear functional on a self-dual code by a unique coset of the code; thus we find 
a coset C" of C consisting of all c' e F" such that 

- wt (c) EE (c,c') mod 2 (15) 



for all c <E C. As in |CS2| we call C" the shadow of C, in analogy with the 



shadow of an integral unimodular lattice. Let 



W^^(x,y):= Vx"-"*(^)y-*(^) (16) 



cGC 



be the generating function for the weight distribution of C". Using discrete 
Poisson inversion as in the proof of the Mac Williams identity and the charac- 



terization (15) of C" we find as in | CS2 | 



W'cix, y) = 2-"/2 V(-l)"*(=)/2(x + y)"""*(=)(x - y)"*(=) 



cec 



(17) 



^2-''/^Wc{x + y,i{x-y)). 
Thus from Wc{x, y) = Pwix^ + y'^,x^ + lix^y^ + j/*) we obtain 

Wi.{x, y) = Pwi'ixy, x^ + UxY + V^)- (18) 

Note that all the words in the shadow thus have weight congruent to n/2 mod 4. 
We could have also obtained this directly from the Mac Williams identity 

Wcix,y)=2-''/^Wcix + y,x-y), (19) 

(which also underlies Gleason's theorem); this would more closely parallel the 
analytic proof of \w\'^ = n mod 8 in ||E1[ . 

If c e C has weight 2 then every codeword either contains or is disjoint 
from c. Thus C decomposes as a direct sum of a double repetition code z 
generated by c and the self-dual code of length n — 2 consisting of codewords 
disjoint from c. Iterating this we decompose C as Co ©z*", where r is the number 
of weight-2 words in C, and Cq is a self-dual code of length n — 2r with no words 
of weight 2. Now for any self-dual codes Ci, C2, their direct sum Ci C2 has 
shadow 

iCi®C2Y = C[®C!,. (20) 

Since the shadow of z is {(0, 1), (1, 0)} it follows that the shadow of z*" consists 
entirely of words of weight r, and if C = Cq ® z*" then the minimal weight of Cg 
is r less than that of C". 



Since C" contains u; + 1" whenever it contains w it is clear that the minimal 
weight of C" cannot exceed the value n/2 attained by z"/^. This is much easier 
than proving the corresponding fact for characteristic vectors of unimodular 
lattices, but it does not show that z"/^ is the only self-dual code whose shadow 
has minimal weight n/2. We prove this, as we did for lattices, by noting that 
such a code C must have W^{x, y) = {2xy)"^^, whence Wdx, y) = (x^ + y^)"/^. 
Since C contains n/2 words of weight 2, then, it can only be z"/^. 

We have shown that the shadow of a binary self-dual code C other than 
z"/^ contains some words of weight < n/2. Thus C" has minimal weight at 
most (n — 8)/2. We next characterize all C attaining this bound. IfC = Co©z'' 
then C attains the bound if and only if Co does, so we need only consider codes 
without weight-2 words. 

Theorem 1 A. Let G he a binary self-dual code of length n with no code- 
words of weight 2. Then: 

i) C has at least n{22 — n)/8 codewords of weight 4. 

a) Equality holds if and only if the shadow of C contains no codewords of 
weight <{n- 8)/2. 

Hi) In that case the number of codewords of weight exactly [n — 8)/2 in the 
shadow is 2("-")/2„. 

Proof: We can mimic the proof of Theorem 1. If the minimal weight of C" is 
at least (n— 8)/2 then W'(j is a linear combination of (xj/)"/^ and (a;y)^"^*^/^(a;^ + 
lAx'^y'^ + y^), and thus Wcix,y) is a linear combination of (a;^ + y'^Y^^'^ and 
(a:^ -I- 2/2)(""*)/^(a;® -f lAx^y"^ + y^). The condition that C have no weight-2 
codewords then forces 

Wc{x, y) = [x^ + y^r'^ ^^i^^ + y'^''-'^^' {{x^ + vY - i^' + Ux'y' + y')) 
= ." + ox-V + "(''-"^x"-V + -.. (21) 



and 



Wc{x, y) = {2xyrl^ - |(2a;y)("-«)/2 [(^2xyf - (x« + 14a;4/ + y^)] 



= 2("-i4)/2(^^)(„-8)/2 [^^8 ^ (^28 - 2n)x''y^ + 



ny 



(22) 



If n < 24 and C is any binary self-dual code of length n containing no words 
of weight 2 and ri(22 — n)/8 + d words of weight 4 then its weight enumerator 
exceeds (|2|) by 

16 



so the weight enumerator of the shadow C" exceeds ( p2| ) by 
d 



^^{2xyr-''y\x'-2xY + y'r. (24) 



Thus C" contains 2^"^^'')/^(i words of weight {n — 16)/2, from which wc find 
that d is a nonnegative muhiple of 2'^^''^"^/^. 

Alternatively we could deduce Theorem lA from Theorem 1 via Construc- 



tion A |CS1, Ch.7, §2]. Recall that this construction associates to a self-dual 



code C C F" the unimodular integral lattice 

Lc :- {2-^/^v I V e Z", V mod 2 e C}. (25) 

The theta series of this lattice is given by 

eLit)^Wc{0zi2t),0'z{2t)); (26) 

in particular Lc has no vectors of norm 1 if and only if C has no codewords of 
weight 2 (NB L^, = Z^), and the N2{Lc) — 2n is 2^ times the number of weight-4 
codewords in C. Moreover the set of characteristic vectors of Lc is 

{2i/2u I w e Z", u mod 2 e C'} (27) 

(in effect the shadow of Lc is obtained by applying Construction A to the 
shadow of C), so the norm of the shortest characteristic vectors is half the 
minimal weight of C". Applying Theorem 1 to Lc thus yields Theorem lA 
immediately. □ 

Thus also the codes C of parts (ii), (iii) of Theorem lA are precisely those 
for which Lc is one of the 14 lattices listed in connection with Theorem 1. 
Of course not every such lattice arises because n must be even; moreover, 
the root system can only involve Ai, D2m, E7 and Eg if the lattice arises 
from construction A. This leaves only the seven lattices with root systems 
£■8, D12, E^, Dl.Dl, Dl,Af of rank 8, 12, 14, 16, 18, 20, 22 respectively. It turns 
out that each of those lattices arises as Lc for a unique code C |^, |PS| . For 
instance the first of these arises from the extended Hamming code, and the last 
from what might be called the shorter binary Golay code; these are the shortest 
self-dual binary codes having minimal weight 4 and 6 respectively. Again it so 
happens that whenever there is a self-dual code of length n < 24 with minimal 
weight at least 4, there is such a code (this time unique) with only n(22 — n)/8 
words of weight 4, so Conway's description of our fourteen lattices also applies 
rnutatis mutandis to our seven codes. 

Can we go past n — 8? 

Our results suggest the following questions: 

For any k > is there Nk such that every integral unimodular lattice all of 
whose characteristic vectors have norm > n — 8k is of the form Lq © Z'" for some 
lattice Lq of rank at most iV^? 



For any fc > is there nk such that every binary self-dual code of whose 
shadow has minimal norm > (n — 8fc)/2 is of the form Co © z'' for some code 
Co of length at most nfe? 

Of course a positive answer for lattices would imply one for codes, and vice 
versa for a negative answer, via Construction A, with nk < Nk in the former 
case. Even k = 2 seems difficult. 
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